Advertisement
Google Gemini Hijack: Command Injection via Messaging Notifications
Researchers demonstrate how Google Gemini voice assistant can be hijacked via malicious messaging notifications to control smart homes and start video calls.
Google Gemini Hijacked on Android via Poisoned Notifications
Researchers demonstrate how WhatsApp and Slack notifications can trigger indirect prompt injection in Google Gemini, leading to memory poisoning.
Misconfigured MSAL for Android Exposes Microsoft Account Tokens
A vulnerability in the Microsoft Authentication Library for Android allowed unauthorized apps to intercept OAuth tokens, impacting billions of users.
Android Intrusion Logging: Enhancing Spyware Forensics for High-Risk Users
Google introduces Intrusion Logging for Android to capture persistent forensic data, aiding the detection of sophisticated spyware and state-sponsored attacks.
7.3M Downloads: Analyzing Fraudulent Android Call History Apps
Researchers discover 28 fraudulent Android apps on the Google Play Store that trick millions of users into expensive, fraudulent subscriptions.